A.8.12
    Technological Controls

    Data leakage prevention

    Data leakage prevention measures should be applied to systems, networks and any other devices that process, store or transmit sensitive information.

    Purpose

    To detect and prevent unauthorized transmission of sensitive information.

    Implementation Guidance

    Implement DLP solutions for endpoints, email, and networks

    Define DLP policies based on data classification

    Monitor for policy violations

    Investigate and respond to DLP incidents

    Educate users about data handling requirements

    Recommended Tools

    ISO 27001 Services from the Directory

    These providers can help you implement A.8.12 and achieve ISO 27001 certification.

    By the team behind ISMS Directory

    Implementing A.8.12 for a client?

    ISMS Copilot drafts policies, evidence, and SoA wording for A.8.12 Data leakage prevention. Built for compliance professionals.

    Try ISMS Copilot free